Provision record
Heap · Contentsquare Master Service Agreement · View original document ↗

Data Processing Agreement Incorporated by Reference

High severity Common · 273 of 352 platforms
Stay ahead of the changes
Track Heap and get the diff the day its terms change.
Share 𝕏 Share in Share 🔒 PDF
ⓘ

This analysis describes what Heap's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

How other platforms handle this

Twitch Medium

Twitch will rely on legal grounds to process your personal information to the extent permitted by applicable law, which may include...to support Twitch's legitimate interests.

TaskRabbit Medium

We rely on this legal basis where the processing is necessary to comply with legal or regulatory obligations.

Lyft Medium

Lyft may process the personal information of teen users between the ages of 13 and 17...Where Lyft processes such personal information, it will do so in accordance with this policy, any applicable service terms...

See all platforms with this clause type →
▸ View Original Clause Language DOCUMENT RECORD
"
the Parties agree that the provisions of Contentsquare's Data Processing Agreement...shall apply except where the Parties have agreed and executed a bespoke data processing agreement...Each Party agrees to comply with the terms of the DPA, which shall be incorporated into the Agreement by reference.

Excerpt from Heap's Contentsquare Master Service Agreement

Applicable regulations

CCPA/CPRA
California, USA
Colorado AI Act
US-CO
CAN-SPAM
United States Federal
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union

Provision details

Document information
Document
Contentsquare Master Service Agreement
Entity
Heap
Tracking information
First captured by ConductAtlas
July 11, 2026
Text quoted from version
CA-V-006848, captured Sept. 11, 2026
Record ID
CA-P-073036
Document ID
CA-D-000705
Evidence Provenance
Source URL
Wayback Machine
Archived bytes SHA-256 (version CA-V-006848)
3409f5092d18d23f25d7dbc26966ecd771dffb1fddc2c185d3603fbcb6d6c0e8
Analysis generated
July 12, 2026 15:50 UTC
Methodology
Evidence
✓ Excerpt found in version CA-V-006848, captured Sept. 11, 2026 (checked Oct. 5, 2026)
Citation Record
Entity: Heap
Document: Contentsquare Master Service Agreement
Record ID: CA-P-073036
Version: CA-V-006848
Captured: 2026-09-11 01:20:57 UTC
SHA-256: 3409f5092d18d23f…
URL: https://conductatlas.com/platform/heap/contentsquare-master-service-agreement/provision/CA-P-073036/data-processing-agreement-incorporated-by-reference/
Accessed: Oct. 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Get the research letter

Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.

Frequently Asked Questions

What does Heap's Data Processing Agreement Incorporated by Reference clause do?

The clause states: “the Parties agree that the provisions of Contentsquare's Data Processing Agreement...shall apply except where the Parties have agreed and executed a bespoke data processing agreement...Each Party agrees to comply with the terms of the DPA, which shall be incorporated into the Agreement by reference.”

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 273 platforms. See the full comparison.

Is ConductAtlas affiliated with Heap?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Heap.